$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft File: CNP7qN3CGMuzA5wDdh5qtwduT6I.mft (raw, json) Hash identifier: JA8g7Y9HCIH4VbgS8UXoQnfqpAMXr08niawZyrqQDdk= Subject key identifier: 33:A7:79:AC:C8:69:60:78:DD:AA:1A:37:A9:9F:25:49:89:24:81:AC Authority key identifier: 08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 Certificate issuer: /CN=A914C10B/serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Certificate serial: 0696 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft Manifest number: 068D Signing time: Sun 22 Mar 2026 22:05:55 +0000 Manifest this update: Sun 22 Mar 2026 22:05:54 +0000 Manifest next update: Sun 29 Mar 2026 22:05:54 +0000 Files and hashes: 1: CNP7qN3CGMuzA5wDdh5qtwduT6I.crl (hash: twEPGP9gesft39ROBSZknuRbZQfFDkWmzao3hkLPiQ4=) 2: CA16E952AF6411EB95CDDD18C4F9AE02.roa (hash: 3xq5p3AVGt409aSIRk2oci21u6gbUU5aFa+YoaSFvTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 22:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B, serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Validity Not Before: Mar 22 22:05:54 2026 GMT Not After : Mar 29 22:05:54 2026 GMT Subject: CN=69c067c2-fe7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a0:73:f6:e6:98:dd:a8:8d:c1:92:0c:3f:53: 04:da:bb:49:ca:ce:7d:a4:c2:f5:ea:50:9d:c6:d8: 1b:52:63:a1:49:0c:74:32:47:d4:b1:d2:09:a6:64: 42:20:c4:2b:9d:62:3f:4a:e1:09:16:f0:e2:8e:3c: 1c:df:39:7f:cc:7c:41:63:4d:fe:36:ad:56:97:38: 51:9a:fb:09:ba:95:3f:49:94:3d:b3:cd:18:c4:e9: 5c:9a:0c:85:2f:b8:df:82:e5:b8:39:52:91:4c:0c: cd:ad:ed:88:bb:ba:da:4b:76:bb:db:10:3d:fe:cd: 95:3b:93:42:77:6a:d4:e4:f3:cd:4f:27:51:ec:f4: 8b:93:27:57:a0:a0:9f:8c:de:d7:e9:76:0d:77:d7: 79:dc:71:ac:0b:c2:4d:de:7b:d4:eb:60:c3:87:07: 08:93:f4:56:35:c8:2b:b1:34:ff:20:1b:6f:d4:49: 3c:74:b1:de:4f:d0:ce:35:3f:82:df:6d:eb:d7:52: 19:b9:a9:2e:38:40:f7:8e:64:41:89:fc:52:42:45: 3c:18:65:6a:ff:c5:a7:82:d8:d2:5e:e6:a6:9e:35: 71:da:0f:ff:01:5c:ff:90:6e:0a:a6:f2:18:39:1f: 2b:9d:93:0c:da:b8:ae:21:76:a2:f8:8a:71:e9:61: e4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A7:79:AC:C8:69:60:78:DD:AA:1A:37:A9:9F:25:49:89:24:81:AC X509v3 Authority Key Identifier: keyid:08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:ae:a3:4a:f2:a9:b2:b1:dd:dd:3c:df:67:8e:58:fd:21:6d: 7e:a5:7d:72:bf:4c:16:fe:37:01:bd:10:c0:48:58:b8:0a:ad: 28:a4:0b:5a:72:44:b6:6b:0e:70:29:35:aa:ce:a5:ac:13:ec: a0:ee:b4:b7:ce:9b:11:91:20:a6:53:9a:5d:a0:ca:4f:77:9e: 98:62:e8:44:bb:4a:1a:78:f2:ec:0c:0d:5d:28:19:76:d6:12: 52:fa:35:e0:ef:e6:b8:93:d8:2d:08:f0:21:0a:27:8f:bf:d9: 96:ba:ec:b9:71:e5:98:3d:04:28:08:41:3c:18:fe:48:43:58: b2:da:52:0b:1c:68:58:44:41:05:fd:d4:91:08:f2:c7:86:d1: 88:af:c5:1c:a0:40:00:65:de:af:26:7d:ac:c9:f1:5c:2c:76: ea:fc:c2:d2:3c:35:e3:ab:78:90:ec:5b:ad:95:c8:9e:b1:78: 5f:39:e6:e4:c6:90:12:90:ec:b0:82:02:74:aa:a8:8a:f3:bf: 76:06:0a:cd:eb:c3:83:06:75:49:a7:fa:2b:b0:1a:13:78:3a: e5:93:6c:09:93:17:26:e6:47:98:c9:c6:68:dd:e0:9b:62:64: 72:13:8f:29:45:96:0d:9b:67:18:47:53:1b:d5:ef:46:28:1e: ed:df:d3:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDA4RDNGQkE4RERDMjE4Q0JCMzAzOUMwMzc2MUU2QUI3 MDc2RTRGQTIwHhcNMjYwMzIyMjIwNTU0WhcNMjYwMzI5MjIwNTU0WjAYMRYwFAYD VQQDEw02OWMwNjdjMi1mZTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhqBz9uaY3aiNwZIMP1ME2rtJys59pML16lCdxtgbUmOhSQx0MkfUsdIJpmRC IMQrnWI/SuEJFvDijjwc3zl/zHxBY03+Nq1WlzhRmvsJupU/SZQ9s80YxOlcmgyF L7jfguW4OVKRTAzNre2Iu7raS3a72xA9/s2VO5NCd2rU5PPNTydR7PSLkydXoKCf jN7X6XYNd9d53HGsC8JN3nvU62DDhwcIk/RWNcgrsTT/IBtv1Ek8dLHeT9DONT+C 323r11IZuakuOED3jmRBifxSQkU8GGVq/8WngtjSXuamnjVx2g//AVz/kG4KpvIY OR8rnZMM2riuIXai+Ipx6WHkMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDOneazI aWB43aoaN6mfJUmJJIGsMB8GA1UdIwQYMBaAFAjT+6jdwhjLswOcA3YearcHbk+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83QjZDQTEyMkFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dNdXpBNXdEZGg1cXR3ZHVU NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOUDdxTjNDR011ekE1d0RkaDVxdHdkdVQ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzEwQi83QjZDQTEyMkFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dN dXpBNXdEZGg1cXR3ZHVUNkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASa6jSvKpsrHd3TzfZ45Y/SFtfqV9cr9MFv43Ab0QwEhYuAqtKKQLWnJEtmsO cCk1qs6lrBPsoO60t86bEZEgplOaXaDKT3eemGLoRLtKGnjy7AwNXSgZdtYSUvo1 4O/muJPYLQjwIQonj7/ZlrrsuXHlmD0EKAhBPBj+SENYstpSCxxoWERBBf3UkQjy x4bRiK/FHKBAAGXeryZ9rMnxXCx26vzC0jw146t4kOxbrZXInrF4Xznm5MaQEpDs sIICdKqoivO/dgYKzevDgwZ1Saf6K7AaE3g65ZNsCZMXJuZHmMnGaN3gm2JkchOP KUWWDZtnGEdTG9XvRige7d/TzQ== -----END CERTIFICATE-----Generated at Tue Mar 24 12:45:53 2026 by rpki-client